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(57) Abstract 

An integrated scries of security protocols is disclosed that protect remote user conununications (22) with remote enterprise services, 
and simultaneously protect the enterprises services from third parties. In the first layer, an implementation of the Secure Sockets Layer (SSL) 
version of a HTTPS provides communications security, including authentication of the enterprise web server and the security of the 
transmitted data. The protocols provide for an identification of the user, and an authentication of the user to ensure the user is who he/she 
claims to be and a determination of entitlements that the user may avail themselves of within the enterprise system. Session security is 
described, particularly as to the differences between a remote user's copper wire connection to a legacy system and a user's remote 
conncctioo to the enterprise system over a "stateless" public Internet (15), where each session is a single transmission, rather than an interval 
of time between logon and logofit as is customary in legacy systans. Security for the enterprise network and security for the data maintained 
by the various entoprise applications is also describe. 
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